BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.2.1.3 Pairing Code

NIST PIV and digital identity SP 800-73-4
All changes in this version
first version loaded 3 PIV Card Application Card Command Interface part of 3.2.1

Title

Pairing Code

Control

If the key reference is '98' and the authentication data in the command data field does not match the reference data associated with the key reference, the command shall fail and the PIV Card Application shall return the status word '63 00'. If the authentication data in the command data field does not satisfy the criteria in Section 2.4.3 , then the PIV Card Application may return the status word '6A 80' instead of '63 00'. If status word '6A 80' is returned, the security status of the key reference shall remain unchanged. If status word '63 00' is returned, the security status of the key reference shall be set to FALSE.

If the card command succeeds, then the security status of the key reference shall be set to TRUE.

Command Syntax

CLA '00' or '10' indicating command chaining '0C' or '1C' for secure messaging INS '20' P1 '00' or 'FF' P2 Key reference. See Part 1, Table 4a.

L c Absent 8 – for absent command data field '08' – for PIV Card Application PIN, Global PIN, or pairing code 3N – for OCC data (where N is the number of minutiae)

Data Field Absent, 7 PIV Card Application PIN, Global PIN, or pairing code authentication data as described in Section 2.4.3 , or OCC data as described in Section 5.5.2 of [SP800-76] . L e Absent

8 If P1='00', and Lc and the command data field are absent, the command can be used to retrieve the number of further retries allowed ('63 CX'), or to check whether verification is not needed ('90 00'). '63' '00' Verification failed '63' 'CX' Verification failed, X indicates the number of further allowed retries '69' '82' Security status not satisfied '69' '83' Authentication method blocked '6A' '80' Incorrect parameter in command data field '6A' '81' Function not supported '6A' '86' Incorrect parameter in P1 '6A' '88' Key reference not found